life-sciences-fieldsalesrep-coordinate
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches starter configuration and visit data from the SalesforceLabs public GitHub repository. This source is associated with the trusted vendor environment and is used to provide the necessary metadata for the setup workflow.
- [DYNAMIC_EXECUTION]: The skill generates temporary local files containing anonymous Apex code and REST API request bodies to perform administrative tasks, such as setting user passwords and triggering metadata cache generation via the Salesforce CLI. These temporary files are explicitly deleted after use.
- [COMMAND_EXECUTION]: The orchestrator utilizes a series of Salesforce CLI (sf), git, and jq commands to manage org configurations, deploy metadata, and query records. The commands are sequenced to ensure dependencies are met between stages.
- [PROMPT_INJECTION]: Instructions in the SKILL.md Phase 8 direct the agent to perform cleanup tasks, such as deleting temporary directories, 'silently' without notifying the user. While concealment is generally a risk factor, in this context it is used for benign resource management.
- [CREDENTIALS_UNSAFE]: The workflow involves creating new users and setting their passwords. The skill provides illustrative password examples in its documentation and describes a manual handoff process for credentials, which is consistent with its intended setup and provisioning role.
Audit Metadata